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FD-1057 (Rev. 5-8-10) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) New case. Date: 06/06/2014 


From: LOS ANGELES 
LA-VNRA (SSA 
Contact: 


Case ID #: 9A-LA-4991169 x cae 


Harold "Hal" Finney - Victim; 


ae 


Extortion; 
OO: LA 


Synopsis: (U) Open and assign. 
Full Investigation Initiated: 06/06/2014 
Details: 


On 5/29/14 the Santa Barbara Sheriff's Dept. (SBSD) received a 
telephone call from a man claiming 
[ithe Sheriff's Dept. swat team, hostage negotiators, K9 units 
and a helicopter were dispatched to the address that the man gave,[__| 


and the family inside was called outside at gunpoint. The 
SBSD determined that no crime had occurred at the house and that this 
was a "swatting incident" perpetrated from an unknown individual. The 
next day the Santa Barbara Fire Dept. was dispatched to the same 


address from a man who said that 
Later that da 


from a man demanding 


ceived several phone calls 


UNCLASSIFIED 


b6 
b7c 
b7E 


b6 
b7C 


UNCLASSIFIED 


Title: (U) New case. 
Re: 9A-LA-4991169, 06/06/2014 


b6 
a The man een — a ersonal information about b7c 


herself and her family. The man then sent an e-mail demanding 


the 


Hal Finney, who is terminally ill with ALS. Hal is one of 


early collaborators of Bitcoin, a virtual currency. The Unsub is 


demanding over[ worth of Bitcoin (it's worth on 5/30/14). 


It is requested that a new case be opened and assigned. 


o¢ 


UNCLASSIFIED 


2 


FD-1036 (Rey. 10-16-2009) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: INSERT Date: 06/11/2014 


Title: (U) Transcript of call#1 to Dispatch 


b6 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


[a 


Harold "Hal" Finney - Victim; 


=a eee 


Extortion; 
OO: LA 


Synopsis: (U) Transcript of call to SBSD dispatch re: murder of family 


Enclosure(s): Enclosed are the following items: 


1. (U) recording 
2. (U) transcript of recording 
o¢ 


UNCLASSIFIED 


FD-302 (Rev. 5-8-10) 


-l of 1l- 


FEDERAL BUREAU OF INVESTIGATION 


Date of entry 06/11/2014 


ff's Department 


The attached reports from the Santa Barbara County Sheri 
regarding the swatting incidents and b6 
b7C 


Also included in the reports are the two 


were provided_by Lt. 
extortion Of 
e-mails that 


received from the subject. 


United States (In Person) 


Date drafted 96/11/2014 


File QA-LA-4991169 

b6 
a 
e b7c 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


Investigation on 06/02/2014 » Santa Barbara, California, 


to be distributed outside your agency. 


FD-1036 (Rey. 10-16-2009) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: INSERT Date: 06/13/2014 


Title: (U) Fire Department call transcript 


b6 
Drafted By:[__ 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


eee 


Harold "Hal" Finney - Victim; 


Ps ee eel 


Extortion; 
OO: LA 


Synopsis: (U) Transcript and recording of subject's call to the fire 
dept. on 5/30/14. 


Enclosure(s): Enclosed are the following items: 


1. (U) Recording of fire dept. call 
2. (U) transcript of recording 
o¢ 


UNCLASSIFIED 


FD-1036 (Rey. 10-16-2009) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: EMAIL Date: 06/20/2014 


Title: (U) RE: exception form 


b7c 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


er 


Harold "Hal" Finney - Victim; 


Extortion; 
oo: LA 


Synopsis: (U) RE: exception form 


¢ 


UNCLASSIFIED 


FD-302 (Rev. 5-8-10) bot 4¢ 


FEDERAL BUREAU OF INVESTIGATION 


Date of entry 06/23/2014 


Po eas interviowed at ner es 
b7C 


residence located at iin Santa Barbara, California, 


telephone number Also present and participating in the 
interview, was The interviewing agents 
were also introduced to Harold Finney (Hal)[ 
ee did not participate in the 


interview or remain present in the room. After being advised of the 
identity of the interviewing Agents and the nature of the interview, | 
provided the following information: 


[ Hal, was diagnosed with Amyotrophic Lateral Sclerosis 
(ALS) in 2009. He is currently at the end stages of the disease, confined 
to a hospital bed and dependent on life support to stay alive. Hal can 


only communicate through his computer using eye movements but is losing 
that abilit control of his eye muscles. 


now too because he is losin 


b6 


On 5/29/14, 
b7C 


ordered out of their house at gunpoint by the Santa Barbara County 
Sheriff's Department after someone had reported that a murder had occurred 
at their home (it is known to the interviewing agents that the Finney's 
were victims of "swatting"). The next morning received several voice 
mail messages on her home telephone from a man (the subject) who's voice 
seemed to be disguised. ae ID feature showed that the subject 


was calling from telephone number The subject claimed 


Soon after the voicemail messages were received, the Santa Barbara Fire 


Department arrived at her house because they received a call that her house 
n fire although nobody in the home had called. The subject called 
again while the police were still at her house responding to the 

report of fire in the home. talked to the subject and he claimed that 


he was the one who sent the SWAT team and fire department to her home. He 


Investigation on 06/04/2014 4 Santa Barbara, California, United States (In Person) 

File# QA-LA-4991169 Date drafted 06/06/2014 

by b6 
b7C 

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 

to be distributed outside your agency. 


FD-1036 (Rey. 10-16-2009) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: INSERT Date: 06/24/2014 


b6 
Title: (U) transcript of mse] | b7c 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Yee el 


Harold "Hal" Finney - Victim; 


a 


Extortion; 
OO: LA 


is: (U) Transcript of telephone call between UNSUB and |] 
and voicemail messages left by UNSUB 


Enclosure(s): Enclosed are the following items: 
a. (U) unsuB/[ call recording 


25 (U) Recording of SBSD/unsub call 
3. (U) Recording of voicemail messages left by UNSUB 
o¢ 


UNCLASSIFIED 


FD-1036 (Rey. 10-16-2009) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: INSERT Date: 06/24/2014 


Title: (U) VM msg. 5/30/14 


Case ID #: 9A-LA-4991169 (U) UNSUB; 
Harold "Hal" Finney - Victim; 


Extortion; 
oo: LA 


Synopsis: (U) Voicemail message from UNSUB left on 5/30/14 at 10:00PM 


Enclosure(s): Enclosed are the following items: 
Tis (U) recording of 5/30/14 voicemail 


¢ 


UNCLASSIFIED 


FD-1036 (Rey. 10-16-2009) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: INSERT Date: 06/26/2014 


Title: (U) June 1, 2014 recordings and transcript 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


ae 


Extortion; 
OO: LA 


Synopsis: (U) reports, recordings and transcript of 6/1/14 incident 


Enclosure(s): Enclosed are the following items: 


1. (U) Recording of 6/1/14 call to SB County Fire Dept. 
2. (U) recordings between UNSUB and Dep. [ ferusis 


oie (U) sheriff's report 


¢ 


UNCLASSIFIED 


serial 9 


FD-1057 (Rev. 5-8-10) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


b6 


Title: (U) Lead to Carl Juncton, MO Date: 07/28/2014 b7c 
b7E 
From: LOS ANGELES 
Case ID #: 9A-LA-4991169 (U) UNSUB; 
Harold "Hal" Finney - Victim; 
Extortion; 
OO: LA 
Synopsis: (U) Determine wi-fi security. 
Full Investigation Initiated: 06/06/2014 
Details: 
On 5/29/2014 at 11:25 am, the Santa Barbara County Sheriff’s 
Department (SBSD) received an emergency telephone call from a 
distraught man who identified himself as and said that he b6 
b7Cc 


The SBSD dispatched the SWAT team, hostage negotiators, 
Detectives, K9 units and a helicopter to the residence. Neighboring 


houses were evacuated and two schools in the area were placed on 


lockdown as a precaution. The residents were then called out of the 


house and it was determined that someone had made a false report 


(swatting) and that nothing had happened at the residence. 


UNCLASSIFIED 


Suspienat Ne 


14-7844 


Santa Barbara County Sheriff 


4434 Calle Real 06/01/2014 


Sante Barbara, CA. 83270-1062 
Repeet Tye 


ALL OTHER. 


we 
b7Cc 


(805) 6814100 


Successful 


b7c 


RCE QQQKCQCKQQAQAAAAAAAAC 


A& SARA 


Y 


ALL ne 


16/12/2014 O9G18E Page 1 of 2 


14-7844 


(One CD containing two audio tracks. The first audio track is the 9-1-1 recording between {he suspect and the 
Q-1+1 call taker, This wae provided ta me by SBSO Dispatch, The second audie track isa phone conversation 
between me and the guspect. | obtained this recording wit) my audia recorder whi je inside {he viciim’s residence, 
The CD was booked into SSO Property as evidence: 


(C}Narrative: 
On Sunday, 06-01-14 abs 
originating fram SBPD 
where he now clainied 


b6 


proximately 1831 hours, | was dispatched teL__}orace tt transfe 


he paporting parly was eansferrod to > §BSOP7C 


a! at ey oe . snot ch 
their number or aie off their  Gieprone 6 because Hal j iS terminally — communicate with 


muitiple doctors’ offices. 


Hi or |iertfed myself 3 the Deputy Ligien rand activated my audio 


: i, Can j : elo you ihe suspect 


; ‘verity who I was, 1 lobvieusl y dic net adhere to his 


but itwac not in service. | belleve the suspect 
ased on his statemert about turning Into Spiderman at 
. despite SBSO receiving the false report at 1829 hours. 


ca ing fromm somewhere other: 
night | Lawes noatdusk unl appro 


(ODisposition: 
Attn. Records: Fo! 


UNCLASSIFIED 


Title: (U) Lead to Carl Juncton, MO 
Re: 9A-LA-4991169, 07/28/2014 


incident was) SS—=idiHa Finney is in the end stages of b6 


Amyotrophic Lateral Sclerosis (ALS), aka Lou Gehrig’s disease, and is BIS 


bound to a hospital bed and on life support. 


On 5/30/2014 at 5:45am, received a telephone call 
from a man who asked if she was nd then he hung up. She 


immediately got six more telephone calls that she let go to voicemail. 


In the messages the man said 


The caller said he would 
Thirty minutes 


later the Santa Barbara County Fire Department received a telephone 


call from a man claiming to be Hal Finney saying that{L sid 


The fire 
department was dispatched to the Finney residence and it was determined 
that there was no fire and that this was another “swatting” incident. 
While two deputies were at the Finney house taking a report, the man ie 
called again and [answered and recorded the call. The man said b7c 


that 
The man 


The caller stated 


UNCLASSIFIED 


2 


UNCLASSIFIED 


Title: (U) Lead to Carl Juncton, MO 
Re: 9A-LA-4991169, 07/28/2014 


b6 
b7C 


The caller then asked[___ Jif the police were standing next to 


her listening to their conversation De 
caller replied, “Police don’t condone extortion so ighly dou 


you're gonna go through what you say but I’m just telling you now that 


The caller then sent 


an email while they were talking on 
the phone which read, 


The caller continued to call the Finney household for about ten 


more days but always hung up when he got the answering machine. 


The caller used a voice disguiser in every call except_for the 


eee (ie Department when he reported that 


contacts and swatting were causing such stress 


b6 
b7C 


Hal is one of the early collaborators of Bitcoin and only 


the second person to mine it after it was anonymously created by an 


individual only known by the moniker Satoshi Nakamoto. Some theories 
on the internet are that Hal Finney is Satoshi Nakamoto butt | 
denies that he is, although he has always worked in the cryptography 


field. Hal was diagnosed with ALS in 2009 and can no longer move, 


swallow, blink, communicate, eat, or breathe on his own. 


UNCLASSIFIED 


3 


UNCLASSIFIED 


Lead to Carl Juncton, 
9A-LA-4991169, 07/28/2014 


Title: (U) 


MO 
Re: 


The caller used Skye to make his calls to the Police 
Fire Department and to the Finne 


Department, 
's. 


b6 
b7Cc 
b3 


A Facebook.com 


age was identified for 


According to 
ears that he also lives at this address with[ | 


Tt is as that the i. agent proceed to 


a 


b7C 
and determine if there isa bTE 
wireless network at the location and if it is a secure network. 


ies 
also requested that a physical description of the location be obtained 
for a potential search warrant of the residence. 


The following is a description of [ana the location: 


UNCLASSIFIED 


4 


FD-1057 (Rev. 5-8-10) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Results of Investigation at Carl Date: 08/07/2014 
Junction, Missouri 


ce: b6 
. b7Cc 
b7E 
From: KANSAS CITY 
KC-07 
Case ID #: 9A-LA-4991169 U) UNSUB; 
Harold "Hal" Finney - Victim; 
Extortion; 
OO: LA 
; ; b6 
Synopsis: (U) To Document Investigation at b7c 


Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: 


1s (U) Photo of 

2. (U) Photo of 

3. (U) Photo of 

4. (U) Photo of 

8) bs 
b7C 

Details: 


Investigation Pn Junction, Missouri 


determined a NETGEAR Secure WiFi network and a Sony Play Station 3 


wireless system is present at the address. 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) Results of Investigation at Carl Junction, Missouri 
Re: 9A-LA-4991169, 08/07/2014 


is registered to[ 


foe A visual check of the residence confirmed three vehicles 


Open source record checks reveal that the property is owned by 


Missourl, 
indicating the is a renting tenant at the property. 


Records identified the residence to be 


in Missourl. 


A visual check confirmed the residence's location depicted on the 


county recorder's 


(U) The residence 


Ce in issouri, that has 


(U) were collected and placed into 


the 1A section of the case file. 


(U) Kansas City considers this lead covered. 


UNCLASSIFIED 


2 


b6 
b7Cc 


b6 
b7C 


UNCLASSIFIED 


Title: (U) Results of Investigation at Carl Junction, Missouri 
Re: 9A-LA-4991169, 08/07/2014 


o¢ 


UNCLASSIFIED 


3 


serial 11 


FD-1057 (Rev. 5-8-10) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Leads trom[ | Date: 10/06/2014 


From: LOS ANGELES 


b7C 


b3 
Drafted py:[| 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


es | 


Harold "Hal" Finney - Victim; 


a 


Extortion; 
OO: LA 


Synopsis: (U) Leads to contact other possible victims. 
Full Investigation Initiated: 06/06/2014 
Details: 


On 5/29/2014 the Santa Barbara County Sheriff’s Department (SBSD) 
received a telephone call from a distraught man who identified himself 
as [ and said that b6 
The SBSD dispatched the SWAT team, BEG 
hostage negotiators, Detectives, K9 units and a helicopter to the 


residence. Neighboring houses were evacuated and two schools in the 


area were placed on lockdown as a precaution. The residents were then 


called out of the house and it was determined that someone had made a 


false report (swatting) and that nothing had happened at the residence. 


The residents of the home are[_ da, TT 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) Leads fron| 


Re: 9A-LA-4991169, 10/06/2014 


Amyotrophic Lateral Sclerosis (ALS), aka Lou Gehrig’s disease, and was 


bound to a hospital bed and on life support. Hal Finney subsequently 
died in August 2014. 


The next day received a telephone call from a man 
who asked if she was and then he hung up. She immediately got 
six more telephone calls that she let go to voicemail. In the messages 


Thirty minutes 


later the Santa Barbara County Fire Department received a telephone 
call from a man claiming to be Hal Finney saying that(C sd 
The fire 
department was dispatched to the Finney residence and it was determined 
that there was no fire and that this was another “swatting” incident. 
While two deputies were at the Finney house taking a report, the man 


that 
The man 


ee 


The man knew that the Bitcoin[ | 


The caller stated that he knew the police were at her 


house and listening to his call but he didn’t care because he was 


anonymous and lived in said that 


UNCLASSIFIED 


2 


b3 


b6 


b7C 


b6 
b7Cc 


UNCLASSIFIED 


7 b3 
Title: (U) Leads ee) 


Re: 9A-LA-4991169, 10/06/2014 


b6 
b7Cc 
The evening of 5/30/2014 Hal wanted oy 
| ) Hal was one of the early collaborators of Bitcoin and only 
the second person to mine it after it was anonymously created by an b6é 
individual only known by the moniker Satoshi Nakamoto. Some theories Bie 
on the internet are that Hal Finney was Satoshi Nakamoto but[ 
denies that he was, although he always worked in the cryptography 
field. 
The caller used Skype to make his calls to the Police Department 
. ; . b3 
Fire 1 


It is requested that lead 


UNCLASSIFIED 


3 


UNCLASSIFIED 


_ b3 
Title: (U) Leads a 


Re: 9A-LA-4991169, 10/06/2014 


offices attempt to locate these other agencies called by the subject to 


determine if there are more victims or if any recording exists of the 


calls. 


b6 
b7C 
b3 
b7E 


It is requested that the LVMPD be contacted and a recording of the 


calls be obtained and any reports obtained if they were generated. 


UNCLASSIFIED 


4 


FIED 
Title: (U) Leads from 


Re: 


4 


9A-LA-4991169, 


10/06/2014 


UNCLASSIFIED 


5 


serial 12 


b3 


FD-1057 (Rev. 5-8-10) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) lead to contact| si Date: 10/06/2014 at 


b7E 
From: LOS ANGELES 
LA-VNRA ( 
Contact: 
Case ID #: 9A-LA-4991169 (U) UNSUB; 
Harold "Hal" == = Victim; 
Extortion; 
OO: LA 
Synopsis: (U) Interview [ 
Full Investigation Initiated: 06/06/2014 
Details: 
On 5/29/2014 the Santa Barbara County Sheriff’s Department (SBSD) 
received a telephone call from a distraught man who identified 
himself as [ana said that b6 
b7c 


The SBSD dispatched the 
SWAT team, hostage negotiators, Detectives, K9 units and a helicopter 


to the residence. Neighboring houses were evacuated and two schools 


in the area were placed on lockdown as a precaution. The residents 


were then called out of the house and it was determined that someone 


had made a false report (swatting) and that nothing had happened at 
the residence. 


The residents of the home wereld al, 
CF ise at the home during this 


incident> ural Finney, age 59, was in the end stages 


of Amyotrophic Lateral Sclerosis (ALS), aka Lou Gehrig’s disease, and 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) lead to contact 
Re: 9A-LA-4991169, 10/06/2014 


was bound to a hospital bed and on life support. Hal Finney 
subsequently died in August 2014. 


The next day received a telephone call from a man 
who asked if she was nd then he hung up. She immediately got 
six more telephone calls that she let go to voicemail. In the messages 


man said he was the one who 


| ——SCSOS RET Te Sad he wouldy 
later the Santa Barbara County Fire Department received a telephone 
call from a man claiming to be Hal Finney saying thatt——~—~—sY 
department was dispatched to the Finney residence and it was determined 
that there was no fire and that this was another “swatting” incident. 
While two deputies were at the Finney house taking a report, the man 
called again and[L______J answered and recorded the call. The man said 


that he 
The man 


The man knew that the Bitcoin 


b6 
b7C 


The caller stated that he knew the police were at her 
house and listening to hj but he didn’t care because he was 
anonymous and lived in wnen[ __saia that she didn’t 


understand Bitcoin but would try to figure it out, the caller replied, 


UNCLASSIFIED 


2 


b6 
b7C 


UNCLASSIFIED 


Title: (U) lead to contact 
Re: 9A-LA-4991169, 10/06/2014 


The caller then asked[ sid the police were standing next to 


her listening to their conversationL._——™————C~CC_ Jan the 


caller replied, 


The caller then se n email while they were talking on 


the phone which read, 


The caller continued to call the Finney household for about ten 


more days but always hung up when he got the answering machine. 


The caller used a voice disguiser in every call except for the 
first call to the Police Department when he reported that he[ 


The evening of 5/30/2014 Hal wanted to have his 


Bitcoin and only 


the second person to mine it after it was anonymously created by an 
individual only known by the moniker Satoshi Nakamoto. Some theories 
on the internet are that Hal Finney was Satoshi Nakamoto but [| 
denies that he was, although he always worked in the cryptography 
field. 


The caller used Skype to make his calls to the Police Department, 


Fire Department and to the Finney’s. 


It 1s requested that lead 
offices attempt to locate these other agencies called by the subject to 
UNCLASSIFIED 


3 


b6 
b7Cc 


b6 
b7C 


b6 
b7C 


b3 


UNCLASSIFIED 


Title: (U) lead to contact [ 


10/06/2014 


Re: 9A-LA-4991169, 


determine 


7 


ther 


ar 


more victims or if any recording exists of 


calls. 


UNCLASSIFIED 


4 


the 


b6 
b7C 


b3 
b6 
b7C 


-l of 1- 


FD-302 (Rev. 5-8-10) 
FEDERAL BUREAU OF INVESTIGATION 


Date of entry 11/17/2014 


b6 
was b7C 
from him. After 


interviewed further regarding an attempt to extort Bitcoin 


being advised e identity of the interviewing Agent and the nature of 
provided the following information: 


the interview, 


b6 
b7C 
RE received numerous tips on-line regarding the identity of the 
extortionist but doesn't know if the information is accurate. 
Investigation on 11/05/2014 » Ventura, California, United States (Email) 
Filed 9AZLA- 4991169 Date drafted 11/14/2014 
eT b6 
b7C 


by 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 


serial 14 


FD-302 (Rev. 5-8-10) “ef ls 


FEDERAL BUREAU OF INVESTIGATION 


Date of entry 11/17/2014 


PO 
b7C 

e-mail address [J provided the following information 

regarding an attempt to extort Bitcoin from him. After being advised of 


the identity of the interviewing Agent and the nature of the interview, [ 
provided the following information: 


ea ee was hacked into and the hacker got access col | 


personal information such as his passport number, information_about his 


mother and his Social Security Number. The hacker contacted [Joy Skype 


use the personal information to ruin his life by selling it to fraudsters. 


b6 
b7C 


provided the links to the attached printed website articles 
corroborating and detailing his story. 


| b6 
Investigation on 10/28/2014 b7c 


File # 9A-LA-4991169 Date drafted 11/07/2014 


wy | | 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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UNCLASSIFIED/4-6t0—— 


SITUATIONAL INFORMATION REPORT 
FEDERAL BUREAU OF INVESTIGATION 


Tradecraft Alert 
LOS ANGELES Division 


Approved for Release: 19 November 2014 


sik Number] ve 


b7C 
(U//FOO}Swatting Incident tied to Extortion Demanding Bitcoin Ris 


SOURCE: (U//FO#6yAn officer of another law enforcement agency. 


(U/FOUOTAs of May 2014, according to a law enforcement source, a disabled resident of Santa 


Barbara County and his family (victims) were targeted for extortion demanding bitcoin’, an 
alternative currency, through the use of swatting. 


(U//EOU85 The perpetrator (subject) obtained personal information about the victims, including 
medical condition, residential location, identity of family members, and financial investment 
information. The subject phoned in a false emergency call to a local law enforcement agency 

first name but a correct last name)[__] 

A SWAT team, hostage negotiators, 

detectives, K-9 units, and a helicopter were deployed to the residence. Neighboring houses were 
evacuated and two local schools were placed on lockdown as a precaution. It should be noted that 
at the time of the swatting incident, the husband was bound to a hospital bed on life support. 


reident Do eon to the same law enforcement source, prior to and subsequent to the 
incident, eceived multiple telephone calls presumed to be from the subject, many of b6 


which went to voicemail. In the messages, the male subject_claimed responsibility for the b7C 
ing incident, Th lso. 1m itional thr 


UNCLASSIFIED//FOtG06— 


UNCLASSIFIED//FO6tC6— 


. . a b6 
Thirty minutes after the threat, 7c 


a local fire department received a call from the subject claiming to be the husband. The subject 
maleafalse cept 


This incident was resolved as another swatting incident. 


Akad Belac a t to the report of fire, the subject called again and demanded bitcoin 
_S 


made reference to the husband's medical condition 


(U//FE0> The subject made the calls using Skype technology and used a voice disguiser in 

every call except for the first one when he reported ee teed b6 
b7c 

1 (U) According to open-source information, the US Treasury has characterized bitcoin as a 


decentralized virtual currency. Bitcoin payments work peer-to-peer without a central repository 
or single administrator. The virtual currency allows users to conduct transactions globally. 


(U) This report has been prepared by, ivisi ents and queries may es 
be addressed to the LOS ANGELES = 


UNCLASSIFIED//FO6- 
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FEDERAL BUREAU OF INVESTIGATION 


Date of entry 11/19/2014 


e-mail sn 
address provided the following additional information 
regarding an attempt to extort Bitcoin from him. After being advised of 
the identity of the interviewing Agent and the nature of the interview,[ | 
provided the following information: 
aiee| neue contacted telephonically by an individual claiming to be a 
Detective in Missourri, that was the only time he spoke to anyone 
telephonically regarding the Bitcoin extortion demands_and the voice on the 
telephone did not sound as if it was being disguised. 
The contact from b6 
b7C 
Investigation on 11/06/2014 » Ventura, California, United States (Email) 
Filed QA cLA-4991169 Date drafted 11/14/2014 
b6 
by b7Cc 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 
to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of entry 11/19/2014 


b6 
; ; - ; one ; b7Cc 
e-mail address provided the following information b7E 
regarding an attempt to extort Bitcoin from him. After being advised of 
the identity of the interviewing Agent and the nature of the interview,[ | 
provided the following information: 
On /26/14[ __|was telephonically contacted by an individual 
identifying himself as Officer 
advised them that someone was 
impersonating an officer from their department. 
Investigation on 11/13/2014 » Ventura, California, United States (Email) 
Fileg QA-LA-4991169 Date drafted 11/17/2014 
b6é 
b7c 


by 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


. b6 


b7E 
el 
From: LOS ANGELES 
LA-RVO1l SSA 
Contact: 
Case ID #: 9A-LA-4991169 U) _UNSUB; 
- Victim; 
Harold "Hal" Finney - Victim; 
xtortion; 
oo: LA 
: , b6 
Synopsis: (U) Tp document contact co ne coverage of b7C 


leads. 
Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: 


‘leg (U) Email 
2. (U) PowerPoint 
Details: 


On October 15, 2014, via e-mail a 


recording of a swatting call that was made to the Riverside Police 


Department (RPD) on June 5, 2014. For details of the call refer to the 


attached e-mail and PowerPoint presentation containing the recording. 
The attached PowerPoint presentation was forwarded to the case agent 
on the same date it was received from RPD. sa[__|was notified that 
the Riverside Sheriff's Department (RSO) had not been able to locate 


the requested swatting call, made to their department on 6/5/14, that 


UNCLASSIFIED 


UNCLASSIFIED 


ritie: (vy LL 


Re: 9A-LA-4991169, 11/20/2014 


possibly went through their dispatch. sal | has provided additional 
details to assist RSO in locating the call. 


On November 18, 2014, saL__] met with [ Refer to 


the separate report of the interview of[ ror details. In 


summary[ __|was not willing to cooperate in the investigation at 


this time but left the door open to cooperating in the future. 


4 


UNCLASSIFIED 


2 
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FEDERAL BUREAU OF INVESTIGATION 


Date of entry 11/20/2014 


b6 
was interviewed at his residence located al b7c 


A female who answered the door of the residence called to the 
door after being advised of the contacting Agent's identity. 
stepped out front of the house and closed the door behind him. After being 
advised of the identity of interviewing Agent and the nature of the 


interview, asked if he could take a picture of the Agents 
credentials. When he was told he could not[____]began questioning how 
he could be sure of the Agent's identity. expressed concern about 
how the Agent came to find out where was living and he also 
expressed doubt about the truthfulness of why the Agent was there. After 
the Agent explained to [how he could confirm the Agent's identity 
and explained in detail the nature for the interview and that [was 
believed to be a victim of an extortion by a criminal or criminal 
enterprise, [remarked that the Agent works for the biggest Criminal 
Enterprise in the country. When asked to clarify, said the US 
Government is the biggest criminal enterprise and that the collection of 


taxes was illegal. 


b6 
ele advised that he did not have to talk to the Agent and that b7c 


he Agent was there on an investigative lead because[____] was believed to 
be a victim. If did not want to talk or cooperate the Agent would 


leave. continued speaking and asking questions so the interviewing 
Agent continued to try to ask questions about the possible extortion. 


was not forthcoming with answering any questions, but did 
acknowledge that he had received an extortion demand on the date in 


b6 


11/18/2014 4, alifornia, United States (In Person) bic 


Investigation on 


File# 9A-LA-4991169 Date drafted 11/19/2014 
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. b6 
eer | | tnterview on 21/18/2014 Page 2 Of 2 ee 


question and that he had been being harassed. faa said he had done 
some of his own investigation and wanted to work in partnership with the 


FBI to stop the person(s) that were harassing him, but that he would need 
to vet the interviewing Agent first. made references to having 
recorded the call and having identified the call as having originated from 


Skype. also referred to another person of interest but said he 
would provide that information in an e-mail later to the Agent, again 
saying only after he had vetted the agent. [i bcknowledged to being 


involved in the Bit Coin industry and said he was known to those looking to 
trade or buy Bit Coin but did not elaborate. 


[ used his telephone to take a picture of the Agent during the a 
c 


working for the FBI or for those who were extorting him. said that 
the people involved were very able and smart. 


interview. [__saia he could not be sure if the chs Agent was 


No notes were taken during the interview, as[ toi the 
interviewing Agent when he pulled his notebook out that he would not say 
anything if the Agent took any notes. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) RSO Date: 11/20/2014 


b6 
b7C 
b7E 


From: LOS ANGELES 
LA-RVO1 SSA 
Contact: 


Case ID #: 9A-LA-4991169 (U) UNSUB; 
CL 
Harold "Hal" —— - Victim; 
Extortion; 
OO: LA 

Synopsis: (U) To document recording provided by RSO. 


Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: 


1. (U) Email 
2 (U) Recording 
Details: 


On November 20, 2014, sal sd received via e-mail from b6 
f : : b7C 
Deputy[ of the Riverside Sheriff's Department (RSO) two 


recordings possibly associated with a swatting incident called into RSO 


dispatch on June 5, 2014. The e-mail with the attachment was forwarded 


on the same date to the case agent. 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) RSO 
Re: 9A-LA-4991169, 11/20/2014 
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FEDERAL BUREAU OF INVESTIGATION 


Dissemination of Information to Other Agencies 


Title: (U) Attendance, liaison, and dissemination Date: 12/04/2014 
of SIR at the VCIU meeting 


ce:L__ = 


b7Cc 
bT7E 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


| 


Extortion; 

OO: LA 
800A-LA-A2 43509 (U) ANA 

ANGELES 


Full Investigation Initiated: 06/06/2014 


Responsible Organization: LOS ANGELES 


Agency Contacted: Ventura County Sheriff on 12/04/2014 via Meeting, 
In Person 


b6 
POC: Ventura County District Attorney ee b7c 
work: [___ bTE 


Disseminated On: 12/04/2014 (Once) 


Dissemination Details: (U) Writer briefed and disseminated SIR 


[te attendees. 


Method: Written 


Follow-up Required (SSTF): No 


UNCLASSIFIED//Feve— 


UNCLASSIFIED/ /Feve— 


Title: (U) Attendance, liaison, and dissemination of SIR at the VCIU 
meeting 
Re: 9A-LA-4991169, 12/04/2014 


Disseminated Serials: 

9A-LA-4991169 Serial 16 (U/ AROS} Swatting 
Incident tied to 
Extortion Demanding 
Bitcoin 


¢ 
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FEDERAL BUREAU OF INVESTIGATION 


Date of entry 04/08/2015 


On 3/20/2015, Las Vegas Metropolitan Police Department (LVMPD) Sgt. 
provided the writer two CD's and call report logs for 6/1/2014 
and 6/2/2014. The CD and call report logs for 6/1/2014 appear to be 
correct. The CD and call report logs for 6/2/2014 do not appear to be what 
was requested. Both will be submitted via an FD-340. 


b6 
b7Cc 


On 3/20/2015, the writer requested the correct call for 6/2/2014 again 


from Sgt. [L_______] As of 3/27/15, Sgt. [haa not received a status 


update on the missing call. 


Investigation on 03/20/2015 » Las Vegas, Nevada, United States (In Person) 


Files 9A-LA-4991169 Datedated 04/03/2015 


‘ | b6 
b7C 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of entry 04/13/2015 


On 4/8/2015, it was determined that 702-878-8272 is the 
number for the Las Vegas Metropolitan Police Department (LVMPD) 
South Central Area Command. If an emergency call came in on 
this line and someone answered, the call would have been 


forwarded to 911 line. 
b6 


On 4/9/2015, LVMPD on ee the writer one b7c 
11 be submitted 


CD and a call report log for 6/2/2014. Both wil 
via an FD-340. ly 9:47 hours. 


The call came in at approximate] 


Investigationon 04/08/2015  @ Las Vegas, Nevada, United States (In Person) 
Date drafted 04/09/2015 


Filed QA-LA-4991169 
b6 
b7C 


by 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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Date of entry 04/23/2015 


recorded by 


"swatting" calls they wer 


Attached is a transcript of 911 
2014. 


the Las Vegas Metropolitan Police Department on June 1, 


California, United States (Mail) 


Investigation on 04/23/2015 at Ventura, 
Date drafted 94/23/2015 


File? QA-LA-4991169 

b6 
wo 
- b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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Date of entry 04/29/2015 


Attached is a transcript of a 911 call made to the Las Vegas 
Fied 


Metropolitan Police Department on 6/2/14 by an individual who identit 
b7Cc 


Ventura, California, United States (Mail) 


Investigationon 04/23/2015 at 
Date drafted 04/23/2015 


File# 2A-LA-4991169 
a 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Date: 07/01/2015 


eal 
ve) 


Form Type: OTH 


Title: (U) Victim Notification Letter 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


a= 


Extortion; 
OO: LA 
Synopsis: (U) 90 day update regarding investigations notice. 
+4 
UNCLASSIFIED 
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Date of entry 07/06/2015 


b3 


The attached e-mail is from 


California, United States (Email) 


07/02/2015 g Ventura, 


File # 9A-LA-4991169 Date drafted 97/06/2015 
| | b6 
by b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


Investigation on 


to be distributed outside your agency. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (UL Date: 08/12/2015 


From: LOS ANGELES ay 
LA-VNRA (SSA pic 
Contact: b7E 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


Extortion; 
OO: LA 


Synopsis: (U) Facebook accounts identified 
Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: 


ne (U) b6 
2. (U) b7C 
ons (U) 
4. (U) 
Details 


The eee ee oo found for Destin Shryock" 


b6 
b7C 
b7E 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) 
Re: 9A-LA-4991169, 08/12/2015 


b6 
b7Cc 
b7E 
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UNCLASSIFIED 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


eal 
vs) 


Form Type: OTHI Date: 10/06/2015 


Title: (U) Victim Notification Letter 


b6 
approved By: [| bre 
pragted sy:[ 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


Extortion; 
OO: LA 
Synopsis: (U) 90 day update regarding investigations notice. 
+4 
UNCLASSIFIED 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Date: 01/11/2016 


eal 
ve) 


Form Type: OTH 


Title: (U) Victim Notification Letter 


b6 
Approved By: b7C 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


| 


Harold "Hal" a —- Victim; 


Extortion; 
OO: LA 
Synopsis: (U) 90 day update regarding investigation notice. 
+4 
UNCLASSIFIED 


serial 31 


-l of 1- 


FD-302 (Rev. 5-8-10) 
FEDERAL BUREAU OF INVESTIGATION 


Date of entry 02/17/2016 


b6 


Attached is an e-mail | a link cf b7c 


When received this link no longer worked as the page had been removed. 
advised in 2014 that this was received sometime in 


2013 but that he never followed the link. 


Ventura, California, United States (Email) 


Investigationon 96/09/2014 at 
Date drafted 02/12/2016 


Filed QA-LA-4991169 
wh 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
serial 32 
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Date of entry 02/17/2016 


b6 
and contains the b7c 


Hal Finney on 6/13/13 


was forwarded from 
received b 


The attached e-mail 
extortion that was initiall 


at his e-mail address, 


06/09/2014 » Santa Barbara, California, United States (Email) 


Investigation on 
Date drafted 02/12/2016 


Filed QA-LA-4991169 
| b6 
by b7c 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. 
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Date of entry 02/17/2016 


Attached are e-mails, some containing links, trom[ ane 


Santa Barbara, California, United States (Email) 


Investigationon 92/12/2016 at 
Date drafted 02/12/2016 


Filey QA-LA-4991169 
| b6 
by b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 
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Date of entry 02/18/2016 


b6 
on 6/19/13 regarding a telephone call she received on her telephone number 
from the subject's telephone number [om 


5/30/13. 


Santa Barbara, California, United States (Email) 


Investigationon 96/19/2013 at 
02/18/2016 


File¢ 9A7LA-4991169 Date drafted 

b6 
wl fe ee ee b7c 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 


to be distributed outside your agency. ial 35 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Lead to interview subject. Date: 03/28/2016 

From: LOS ANGELES b6 
LA-VNRA (SSA b7c 
Contact: b7E 


Harold "Hal" Finney - Victim; 


LT 


Extortion; 
OO: LA 


Synopsis: (U) Lead to interview Destin Shryock 


Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: mnt 
Ves (U) Missouri driver's license for Shyrock b7E 
2. (U) Missouri driver's license photo for Shryock 

om (U) vehicle registration 

4. (U) Lexis Nexis for Charles Shryock 

Details: 


On 5/29/2014 at 11:25 am, the Santa Barbara County Sheriff's Office 


(SBSO) received an emergency telephone call from a distraught man who 


identified himself as and said CS ee | bé 


b7C 
The SBSO 


dispatched the SWAT team, hostage negotiators, Detectives, K9 units and 


a helicopter to the residence. Neighboring houses were evacuated and 
two schools in the area were placed on lockdown as a precaution. The 
residents were then called out of the house and it was determined that 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) Lead to interview subject. 
Re: 9A-LA-4991169, 03/28/2016 


someone had made a false report (swatting) and that nothing had 


happened at the residence. 
b6 
The residents of the home were Hal, b7c 


incident was Hal Finney was in the end stages of 


Amyotrophic Lateral Sclerosis (ALS), aka Lou Gehrig’s disease, and was 


bound to a hospital bed and on life support. 


The next morning [ie - — -eseanea a telephone call froma 


man who asked if she was} ___fand then he hung up. She immediately 


got six more telephone calls that she let go to voicemail. In the 


messages the man sai¢ Cd 


b6 
b7C 


Thirty minutes 
later the Santa Barbara County Fire Department received a telephone 
call from a man claiming to be Hal Finney saying that he was ina 

The fire 
department was dispatched to the Finney residence and it was determined 


that there was no fire and that this was another “swatting” incident. 


While two deputies _ were at the Finney house taking a report, the man 


called again and The man said 
that 


demanded 


b6 
b7C 


The man 


ee he man knew that] ——s—— —Ci‘“;CSCSC—isS 


the caller replied, 


UNCLASSIFIED 


2 


UNCLASSIFIED 


Title: (U) Lead to interview subject. 
Re: 9A-LA-4991169, 03/28/2016 


b6 
b7Cc 
(see 
serial 7 for full transcript) 
, F : : b6 
The caller then asked [ie the police were standing next to — 
caller replied, “Police don’t condone extortion so I highly doubt 
you're gonna go through what you say but I’m just telling you now that 
The caller then sent an email while they were talking on 
the phone which read, 
The caller continued to call the Finney household for about ten 
more days but always hung up when he got the answering machine. 
The caller used a voice disguiser in every call except for the 
first call to the Police Department when he reported thatT 
b6 
b7C 


UNCLASSIFIED 


3 


UNCLASSIFIED 


Title: (U) Lead to interview subject. 
Re: 9A-LA-4991169, 03/28/2016 


it after it was anonymously created by an individual only known by the 


moniker Satoshi Nakamoto. Some theories on the internet are that Hal 
Finney was Satoshi Nakamoto but [Jaenies that he was, although 
he has always worked in the cryptography field. Hal was diagnosed with 
ALS in 2009 and at the time of this incident he could no longer move, 
swallow, blink, communicate, eat, or breathe on his own. [ 
indicated that 


2014, less than 2 months 


Hal died on August 28, 


fter the calls began. 


The subject used Skype to make his calls to the Police Department, 
Fire Department and to the Finney’s. Call detail records were obtained 


for Skype and it showed that the subject also called Police and Fire 


Departments all over the United States. 


age was identified for 


MO, where he listed that he is a 
According to 


it appears that he also lives at this address with his 


In August 2014, FBI KC went by the[ adress and 


determined that the WIFI was secure and that the house was owned by 


UNCLASSIFIED 


4 


b6 
b7Cc 


b6 
b7c 
b7E 
b3 


b6 
b7C 
b7E 


UNCLASSIFIED 


Title: (U) Lead to interview subject. 
Re: 9A-LA-4991169, 03/28/2016 


In October 2014, FBILA became aware that a 


who both denied making 


the swatting calls. They said that they were the only ones who used 
the computers in the house except oS ees Shryock. 


(Shryock was not present). There were no more reported incidents after 


the Officer's visit to the Carl Junction residence. 


Destin Shryock seems to be the most likely suspect in this case. He 


was just recently identified as Charles Destine Shryock. 


According to 


UNCLASSIFIED 
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b6 
b7C 


b6 
b7C 


b6 
b7C 
b7E 
b3 


UNCLASSIFIED 


Title: (U) Lead to interview subject. 
Re: 9A-LA-4991169, 03/28/2016 


b3 
b6 
b7C 
b7E 


It is requested that a recorded (for voice comparison) interview be 


done of Destin Shryock regarding his extortions and swatting calls to 
the Finney residence. It is also requested that a consent search for 
his computer be obtained. The following topics should be covered 


beyond the logical interview. 


UNCLASSIFIED 


6 


Title: (U) Lead to interview 


Re: 


9A-LA-4991169, 03/28/2016 


UNCLASSIFIED 


subject. 


The following is a description of Shryock: 


Name: 
Race: 
Sex: 
DOB: 
Hair: 
Eyes: 
Height: 
Weight: 


Address: 


MO License: 


Vehicle: 


Charles Destine David Shryock 
White 
Male 
8/24/94 
Brown 
Green 
63" 
185 lbs. 
6011 County Lane 295, Carl Junction, MO 
b6 
(according to vehicle registration) or b7c 
1504 Byers Avenue, Joplin, MO 


W202054008 


2000 Pontiac (white), HJ5P6K 


UNCLASSIFIED 


7 


UNCLASSIFIED 


Title: (U) Lead to interview subject. 
Re: 9A-LA-4991169, 03/28/2016 
o¢ 
UNCLASSIFIED 


8 


serial 


FD-1036 (Rey. 10-16-2009) 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: EMAIL Date: 05/13/2016 


b6 


Title: (U) Shyrock 
b7Cc 


Approved By: SSA 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


Seas 


Extortion; 
OO: LA 
Synopsis: (U) Shyrock 
+4 
UNCLASSIFIED 


37 


FD-1036 (Rey. 10-16-2009) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Date: 06/08/2016 


eal 
vs) 


Form Type: OTH 


Title: (U) Victim Notification Letter 


b6 
Approved By: b7c 


Case ID #: 9A-LA-4991169 (U) UNSUB; 
aro a iInney — Victim; 
OO: LA 
Synopsis: (U) To provide an interim case update regarding this 


investigative matter. 


o¢ 


UNCLASSIFIED 


38 


FD-1057 (Rev. 5-8-10) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) To report on attempted coverage of Date: 06/14/2016 
lead 
b7Cc 


b7E 


From: KANSAS CITY 
KC-07 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


— = 


OO: LA 
Synopsis: (U) To report on attempted coverage of lead. 
Full Investigation Initiated: 06/06/2014 


Details: 


Attempts to locate and interview Destin Shryock in Joplin, Missouri 


have met with negative results. 


Based on surveillance activities, it would appear that Shryock is no 
longer living at 1504 Murphy Boulevard in Joplin, Missouri. Attempts 
to make contact with individuals at this residence met with negative 
results and it appears that the house is empty. Approximately one week 
ago, mail in Shryock's name was still being delivered to the 
residence. A request was submitted to the US Postal Service to obtain 


any change of address information that may have been provided. 


Attempts to locate Shryock at a previously known residence have also 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) To report on attempted coverage of lead 
Re: 9A-LA-4991169, 06/14/2016 


met negative results. Writer has traveled on several occasions to = 
c 
EE Carl Junction, Missouri where Shryock's 
[ Although it is apparent that people are in 


the residence when writer has visited, no individuals will come to the 


door to speak with writer. Attempts to contact Shryock's 
(ee ee also failed. A voice mail message identifies the 


number as Shryock's and writer has left messages but has 


not received a return call. 


It does not appear that Shryock is in custody based on no previous 


arrest appearing on his criminal history. Also, there have been no new 


utility services provided to Shryock by the city of Joplin. 


As detailed above, writer has been unsuccessful in covering the two 
leads set by Los Angeles Division. 


o¢ 


UNCLASSIFIED 


2 
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FD-1057 (Rev. 5-8-10) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Locate and interview Charles Destin Date: 07/14/2016 aa 
Shryock b7E 
From: LOS ANGELES 
LA-VNRA (SSA 
Contact: 
Case ID #: 9A-LA-4991169 (U) UNSUB; 
Harold "Hal" a - Victim; 
Extortion; 
0O: LA 
Synopsis: (U) Interview suspect 
Full Investigation Initiated: 06/06/2014 
Details: 
All new information is in bold. 
On 5/29/2014 at 11:25 am, the Santa Barbara County Sheriff's Office 
(SBSO) received an emergency telephone call from a distraught man who 
identified himself as and said that he —_ 


The SBSO 
dispatched the SWAT team, hostage negotiators, Detectives, K9 units and 


a helicopter to the residence. Neighboring houses were evacuated and 


two schools in the area were placed on lockdown as a precaution. The 


residents were then called out of the house and it was determined that 
someone had made a false report (swatting) and that nothing had 


happened at the residence. 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) Locate and interview Charles Destin Shryock 
Re: 9A-LA-4991169, 07/14/2016 


b6 
Hal Finney was in the end stages of BIC 
Amyotrophic Lateral Sclerosis (ALS), aka Lou Gehrig’s disease, and was 
bound to a hospital bed and on life support. 
The next oe a telephone call froma 
man who asked if she was and then he hung up. She immediately 
got six more telephone calls that she let go to voicemail. In the 
messages the man said 
Thirty minutes 
later the Santa Barbara County Fire Department received a telephone 
call from a man claiming to be Hal Finney saying that he was ina 
The fire b6 
department was dispatched to the Finney residence and it was determined b7C 


that there was no fire and that this was another “swatting” incident. 
While two deputies were at the Finney house taking a report, the man 
called again and{ dre man sai 


The man 
demanded 


The man knew that their Bitcoin were 


eae 


[i the caller replied, b6 
b7c 


UNCLASSIFIED 


2 


UNCLASSIFIED 


Title: (U) Locate and interview Charles Destin Shryock 
Re: 9A-LA-4991169, 07/14/2016 


The caller then askea[ iit the police were standing next to 
her listening to their conversation and she said that[ sand the 
caller replied, “Police don’t condone extortion so I highly doubt 


you're gonna go through what you say but I’m just telling you now that 


The caller then sent an email while they were talking on 
the phone which read, 


The caller continued to call the Finney household for about ten 


more days but always hung up when he got the answering machine. 


The caller used a voice disguiser in every call except for the 


first call to the Police Department when he reported that [ 


[aia not engage the caller_an 


swatting were causing such stress on 


because the contacts and 


Or 


Hal. The evening of 


Hal is one of 


the early collaborators of Bitcoin and only the second person to mine 


it after it was anonymously created by an individual only known by the 


moniker Satoshi Nakamoto. Some theories on the internet are that Hal 
Finney was Satoshi Nakamoto but denies that he was, although 
he has always worked in the cryptography field. Hal was diagnosed with 


UNCLASSIFIED 


3 


b6 
b7C 


b6 
b7C 


UNCLASSIFIED 


Title: (U) Locate and interview Charles Destin Shryock 
Re: 9A-LA-4991169, 07/14/2016 


ALS in 2 


swallow, 


009 and at the time of this incident he could no longer move, 


blink, communicate, eat, or breathe on his own. 


Hal died on August 28, 2014, less than 2 months 


after the calls began. tated she believed the harassment he 


received in June hastened his death. 


The 


subject used Skype to make his calls to the Police Department, 


In August 2014, FBI KC went by the Carl Junction address and 


determined that the WIFI was secure and that the house was owned by 


In October 2014, FBILA became aware that a Detective with the Del 


Rey Beach Florida Police Department had a similiar case and tracked his 


suspect 


to the same Carl Junction, MO address. 


UNCLASSIFIED 


4 


b6 
b7C 


b3 
b6 
b7C 
b7E 


b6 
b7C 


b3 


UNCLASSIFIED 


Title: (U) Locate and interview Charles Destin Shryock — 
Re: 9A-LA-4991169, 07/14/2016 b7c 
[ The Detective had someone from the Carl 
Junction Police Department go to the house on 7/3/14 and interview 
the swatting calls. They said that they were the only ones who used 
the computers in the house except for[ sd Destin Shryock. 
= There were no more Finney incidents after 
the Officer's visit to the Carl Junction residence. 
Destin Shryock seems to be the most likely suspect in this case. He 
was just recently identified as Charles Destine Shryock. 
According to 
b3 
b6 
b7C 


UNCLASSIFIED 


5 


UNCLASSIFIED 


F ; . : b6e 
Title: (U) Locate and interview Charles Destin Shryock — 
Re: 9A-LA-4991169, 07/14/2016 bIE 

A CLEAR query shows that Shryock's cellular telephone number (417) 
540-4474, is subscribed to be X Treme Mechanics at 4266 Cedar Drive in 
Joplin, MO. A Google maps query shows this to be a single family home. 

It is requested that a recorded (for voice comparison) interview be 

done of Destin Shryock regarding his extortions and swatting calls to b6 

the Finney residence. It is also requested that a consent search for . 

his computer be obtained. The following topics should be covered 

beyond the logical interview. 

UNCLASSIFIED 


7 


UNCLASSIFIED 


Title: (U) Locate and interview Charles Destin Shryock 
Re: 9A-LA-4991169, 07/14/2016 


The following is a description of Shryock: 


Name: Charles Destine David Shryock 
Race: White 

Sex: Male 

DOB: 8/24/94 

Hair: Brown 

Eyes: Green 

Height: 6' 3” 

Weight: 185 lbs. 


Possible Addresses: 6011 County Lane 295, Carl 
Junction, MO (where IP was registered, 6031 CL 295, Carl Junction 
(where his vehicle is registered), and 4266 Cedar Drive, Joplin, MO 
(where his phone is registered) or 1504 Byers Avenue, Joplin, MO, 
(where LPR shows his car parked until July 2015. 


MO License: W202054008 


Vehicle: 2000 Pontiac (white), HJ5P6K (tags 
expired in May 2016) 


b6 
b7C 


UNCLASSIFIED 


8 


Title: 


(U) 


UNCLASSIFIED 


Locate and interview Charles Destin Shryock 


Re: 9A-LA-4991169, 07/14/2016 


¢ 


UNCLASSIFIED 


9 
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FEDERAL BUREAU OF INVESTIGATION 


Date of entry 08/03/2016 


b6 
CHARLES DESTIN SHRYOCK, date of birth (DOB) August 24, 1994, telephon b7C 


Junction, Missouri. Also present during the interview was [TT] 
i) ree ony eavieai ot tretaeneaoos 


the interviewing Agent and the nature of the interview, SHRYOCK provided 


the following information: 


SHRYOCK was asked if he was aware that writer had been trying to make 
contact with him and he responded that he was not. When told that writer 
had left a card on his door and had contacted family members requesting 
that he be notified of writer's request to speak with him, SHRYOCK stated 
that he had not found writer's card and had not been provided the 
information by family members. When asked why he failed to show up to a 
previously scheduled interview with another FBI Agent, SHRYOCK stated that 
he had overslept and missed the meeting. 


b6 


When asked if he knew why writer wanted to speak with him, SHRYOCK bic 


stated that he did not. Writer informed SHRYOCK that in May 2014 a family 
in the Los Angeles area had been the victim of "Swatting" and attempted 
extortion and writer was hoping that SHRYOCK could help with the 
investigation. SHRYOCK stated that he was aware that law enforcement 
officers had previously visited residence as a result of a 
"Swatting" incident. SHRYOCK believes that someone had informed law 
enforcement that there were bombs in 


d that in May 2014 he was living with 
ees Carl Junction, Missouri. SHRYOCK believes that he was 
working at Wal-Mart at this time. During this time, SHRYOCK spent a lot of 
time "MODing". When asked what "MODing" was, SHRYOCK stated that it was 
on-line gaming. SHRYOCK spent a lot of time playing XBox360 on-line and 
"Usins" lte. SHRYOCK stated that his 
also played XBox360 on-line and 


SHRYOCK would go to his 


When asked if he ever used his laptop and residence, 


SHRYOCK stated that he did not know if he had a laptop at this time and 


that he may have accessed the internet through his phone. [ 


Investigation on 07/29/2016 Carl Junction, Missouri, United States (In Person) 
File# 9A-LA-4991169 Date drafted 07/29/2016 

b6 
by as a ee ee b7C 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents are not 
to be distributed outside your agency. 
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b6 


(U) To document interview of Charles b7c 


Continuation of FD-302 of Destin Shryock (On 97/29/2016 page 2 of 4 


had a computer at the residence but SHRYOCK did not have access to this 
computer. When asked what type of phone he had at this time, SHRYOCK 


stated that it was either an iPhone or a Blackberry and that the service 


provider was AT&T. SHRYOCK stated that would not give him their 
WiFi password i eee onto the WiFi when 
SHRYOCK would connect to the internet with his XBox360. SHRYOCK stated 
that he was aware that many of the game players on the "7Sins" game site 


hacked computers and conducted "Swatting" attacks. When asked if he still 


had the computer that he previously accessed the "7Sins" game site with, 
SHRYOCK stated that he did not. SHRYOCK stated that he broke the laptop 
and got rid of it. When asked if he still had his XBox360 console that he 
previously used ath stated that he believed he had 
sold the console. When asked who he sold the console to, SHRYOCK believes 
that he sold the console on Craig's List and does not recall who the 
purchaser was. 


SHRYOCK was asked if he knew of anyone who played games using the name 
of SHRYOCK stated that _he previously played 
XBox360 games with a_user who used the name and did not b6 
recognize the name SHRYOCK stated that he knew that b7c 
was involved in hacking computers and extorting people. SHRYOCK 
stated that he did not know real name or where he was located. 
SHRYOCK stated that he stopped playing games with 
became angry with him. When asked why ecame angry with him, 
SHRYOCK stated that he did not know. SHRYOCK stated that after he stopped 
playing games with[ began receiving threatening phone 
calls from[___and during these calls, stated that he was 
going to kill SHRYOCK SHRYOCK stated that he never gave 
his real name and_does_ not know how[_____—s obtained a 
elephone number. telephone number at this time was 
At this time stated that this 
information was correct and t j ould call her in the middle 
of the night making threats. (ceed stated that this activity 
=a! 


continued for several weeks and then became sporadic. 


believes that the calls may have been originating from Florida. SHRYOCK 


stated that he believed that law enforcement came to house as 


a result of something[ nad done. 


SHRYOCK was asked if he accessed Skype from[_——_—sdresiidence using b6 
his XBox360 console. SHRYOCK stated that he didn't believe you could b7c 
access Skype through an older XBox360 console but that he had never done 
that. When asked if he accessed Skype at residence using his 
laptop, SHRYOCK stated that he had not. When asked if he oa 


computer at her residence, SHRYOCK stated that he did not. 
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9A-LA-4991169 


(U) To document interview of Charles b6 
Continuation of FD-302 of Destin Shryock (On 97/29/2016 page 3 Of 4 b7c 


When asked if he had a Paypal account, SHRYOCK stated that he did. 
SHRYOCK was asked if the e-mail address mobthedead19@gmail.com was 
associated to his PayPal account. SHRYOCK stated that it was. SHRYOCK was 
also asked if the e-mail address Destinn@live.com belonged to him and he 
stated that it did. When informed that records indicated that his PayPal 
account was established from a ip address that was used to make extortion 


calls via Skype to the victims in Los Angeles, SHRYOCK stated that he never 
made any extortion or Swatting calls and he believes that may 


have used this ip address to place the Skype calls. When informed that ip 
address resolve_to_a_unigue address and could not be "spoofed", SHRYOCK 
suggested that a have hacked into his gaming console while he 


was playing games on-line. 


as asked if he knew an individual by the name of 
SHRYOCK stated that he believed that may be 
When asked why he would have conducted a PayPal transaction 
with SHRYOCK stated that on one Be peal Boe 
SHRYOCK to send him some $1 via PayPal. When asked why he would need 
SHRYOCK to send him $1, SHRYOCK did not know. 


When asked if he had established an on-line bitcoin wallet, SHRYOCK 
stated that he had established a wallet but that he had never used the 
wallet. When asked why he had established the wallet, SHRYOCK stated that 
bitcoins are frequently used by on-line gamers. 


b6 
SHRYOCK was asked if he could recall the user name he would use while b7c 
playing on-line games. SHRYOCK stated that he normally used the name bT7E 


"MOB". When asked if he had any other user names, SHRYOCK could not recall 
any. SHRYOCK stated that he no longer plays on-line games. 


When asked if he knew an individuals by the name of HAL FINNEY or 


[rr SHRYOCK stated that he did not. SHRYOCK was informed that 


these were the names of the victims of the Los Angeles Swatting attacks and 


extortion attempts. SHRYOCK was informed that the evidence gathered by the 


Foy 


Los Ageles Division indicated that the extortion calls came from an ip 
address associated 

SHRYOCK had access to the 
internet from her residence. SHRYOCK stated that he was not a bad person 


and the he has never conducted a Swatting attack and had never attempted to 
extort anyone. SHRYOCK was asked if he would be willing to take a 
polygraph examination to clear him from any involvement in this crime. 


SHRYOCK stated that he would be willing to take a polygraph examination to 
clear his name. Writer informed SHRYOCK that this option would be 
discussed and that writer would contact him at a later date. SHRYOCK was 
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9A-LA-4991169 


Continuation of FD-302 of Destin Shryock 


(U) To document interview of Charles 


asked if he would meet with writer at a later time 


wer 


on 07/29/2016 


, Page 


if additional questions 


developed and SHRYOCK stated that he would. 


SHRYOCK was provided 


writer's business card at the end of the interview. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Lead to conduct a polygraph Date: 08/09/2016 


From: LOS ANGELES ———} ae 
LA-VNRA (SSA — 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


Extortion; 
OO: LA 


Synopsis: (U) Lead to conduct a polygraph of Charles Destin Shryock. 
Full Investigation Initiated: 06/06/2014 


Details: 


Charles Destin Shryock was interviewed by FBI KC on 7/29/16 
regarding the 2014 swatting and extortion of Hal Finney and 
in Santa Barbara, California. Shryock denied knowing of Hal Finney or 
being responsible for the swatting and extortion and instead blamed it 
| cr) Shryock did admit to having a Bitcoin wallet, having 
Paypal, and having the e-mail address of mobthedead19@gmail.com. 


b6 


Shryock consented to a polygraph examination at a future date. It is 
b7c 


requested that a polygraph exam be arranged and conducted of Shryock, 


the only suspect in this case. Shryock indicated that he could be 


o¢ 
UNCLASSIFIED 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) To document coverage of lead. Date: 09/06/2016 
ce: b6 
b7Cc 
b7E 
From: KANSAS CITY 
KC-07 
Contact: Po 
Case ID #: 9A-LA-4991169 (U) UNSUB; 
ol nF = Victim; 
Extortion; 
OO: LA 
Synopsis: (U) To document coverage of lead. 
Full Investigation Initiated: 06/06/2014 
Details: 
On September 6, 2016, writer spoke with Joplin, Missouri based 
attorney advised that he is representing b6 
b7Cc 


Charles "Destin" Shryock. stated that during a conversation 
with Shryock, he learned that 
the FBI had requested that Shryock take a polygraph examination to 
eliminate him as a suspect in an extortion investigation. [ 
informed writer that after discussing the situation with Shryock, 


Shryock has decided that he will not take a polygraph examination. 


PO 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) To document coverage of lead. 
Re: 9A-LA-4991169, 09/06/2016 


Formation 


was informed that this inf 


would be provided to the Agent conducting the investigation. 


Due to Shryock's decision to not take a polygraph examination, the 


Kansas City Division considers this lead covered. 


4 


UNCLASSIFIED 


2 
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b6 
b7C 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 
Title: (U) Obtain death certificate Date: 01/17/2017 


From: LOS ANGELES ne 
LA-VNRA (SSA pic 
Contact: b7E 


prafted by:|__— 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


Harold "Hal" Finney - Victim; 


iain! 


Extortion; 
OO: LA 


Synopsis: (U) Lead to obtain death certificate 
Full Investigation Initiated: 06/06/2014 


Details: 


It is requested that a copy of the death certificate for the 


following subject be obtained so that this case can be closed. 


Name: Charles Destine David Shryock 
AKA: Charles David Shryock 

Sex: Male 

Race: White 

DOB: 8/24/94 


UNCLASSIFIED 


Title: (U) 


Re: 9A-LA-4991169, 


Residence: 


¢ 


UNCLASSIFIED 


Obtain death certificate 


DOD: 11/18/16 


Carl Junction, 


01/17/2017 


Jasper County, 


UNCLASSIFIED 


2 


Missouri 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Email regarding death of Charles Date: 01/18/2017 bé 
Shryock cae 
b7E 


From: LOS ANGELES 
LA-VNRA (SSA 
Contact: 


Case ID #: 9A-LA-4991169 (U) UNSUB; 
Harold "Hal" Finney - Victim; 


Extortion; 
OO: LA 


Synopsis: (U) e-mail regarding subject's death 
Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: 
1. (U) e-mail 


Details: 


Attached is an e-mail from FBI KC regarding the death of the subject 
Charles Shryock. 


o¢ 


UNCLASSIFIED 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Death certificate for Charles Destin Date: 01/20/2017 
David Shryock 


b6 
cc: b7C 
b7E 


From: KANSAS CITY 
KC-24 


Case ID #: 9A-LA-4991169 (U) UNSUB; 


ed | 


Harold "Hal" ances - Victim; 


Extortion; 
OO: LA 


Synopsis: (U) Scanned copy of Missouri death certificate for Charles 
Destin David Shryock. 


Full Investigation Initiated: 06/06/2014 


Enclosure(s): Enclosed are the following items: 
1 (U) Death Certificate 


Details: 


; . . b6 
[ Supervisor, Missouri Department of Health (MDH), Bureau b7Cc 


of Vital Statistics, 930 Wildwood Drive, Jefferson City, Missouri, 


telephone number[ provided a copy of the Missouri 


Certification of Death, 124-16-034509, filed on 11/23/2016. This 


certificate recorded the death of Charles Destin David Shryock on 


11/18/2016 in Jasper County, Missouri. The underlying cause of death 


was listed as accident, apparent drug overdose-unknown. 


UNCLASSIFIED 


Title: (U 
Re: 9A-LA 


UNCLASSIFIED 


ficate for Charles Destin 


) Death certit 


-4991169, 01/20/2017 


The certit 


o¢ 


David Shryock 


ficate is attached as an electronic 1A package. 


UNCLASSIFIED 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) Dispose of 1Bl1 Date: 01/25/2017 


From: LOS ANGELES 


b6 
LA-VNRA (SS b7c 
Contact: b7E 


Approved By: ssaL___ 


Case ID #: 9A-LA-4991169 U) UNSUB; 


Harold "Hal" on —- Victim; 


Extortion; 
OO: LA 
Synopsis: (U) Disposition of 1Bl1 


Full Investigation Initiated: 06/06/2014 


Details: 


It is requested that 1Bl, described as a voicemail recording on a 
compact disk, be destroyed as a 1B item and converted to a 1A and 


returned to the writer to be put into the physical file. 


¢ 


UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: (U) 1A for file for 1Bl1 


Date: 02/14/2017 


From: LOS ANGELES 
LA-EVID b6 
Contact Bye 


Case ID #: 9A-LA-4991169 (U) 


Charles Destine David Shryock; 


Harold "Hal" —— - Victim; 


Extortion; 
OO: LA 


Synopsis: (U) Submitting 1A to case file. 
Full Investigation Initiated: 06/06/2014 


Reference: 9A-LA-4991169 Serial 47 


Enclosure(s): Enclosed are the following items: 


1. (U) (1) One original FD 1087 and FD 1004 for 1Bl. (1) 


One EC for SN 
47. (1) One CD (1B1) 


Details: 


Document created to submit 1A to sentinel case file. 


(1) One original FD 1087 and FD 1004 for 1B1. 


— 


1) One EC for SN 47. 


— 


1) One CD (1B1) 


UNCLASSIFIED 


UNCLASSIFIED 


Title: (U) 1A for file for 1Bl1 
Re: 9A-LA-4991169, 02/14/2017 
o¢ 
UNCLASSIFIED 


2 
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